$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853a25de-66ae-4a21-a3a6-bc96c0d2aa83.roa File: 853a25de-66ae-4a21-a3a6-bc96c0d2aa83.roa (raw, json) Hash identifier: ivGr0Cs1EdIh7jF12Mkw1+RIis3icGutoGhmFiKDd7E= Subject key identifier: E1:B2:22:34:00:77:2D:8B:79:B2:2F:2C:C2:04:5F:03:0C:74:79:FA Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 19156A9DEC1A9A76C1A62996624E4817FFBEDB8C Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853a25de-66ae-4a21-a3a6-bc96c0d2aa83.roa Signing time: Thu 16 Apr 2026 00:00:11 +0000 ROA not before: Thu 16 Apr 2026 00:00:11 +0000 ROA not after: Wed 15 Jul 2026 23:59:59 +0000 asID: 16509 IP address blocks: 162.220.32.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:15:6a:9d:ec:1a:9a:76:c1:a6:29:96:62:4e:48:17:ff:be:db:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Apr 16 00:00:11 2026 GMT Not After : Jul 15 23:59:59 2026 GMT Subject: serialNumber=6bbb2ce5b5b05146c61a04d73b97169a1444f8d2544ad3980aa903dbfb06f2f2, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:c9:cb:f6:00:e6:38:6a:70:b7:e6:30:52: dd:6d:e7:8c:ce:2f:4d:0c:91:47:d7:72:8a:1c:80: 73:c8:bc:f0:01:18:a1:ae:c2:af:5e:84:cc:dd:9b: c7:58:2e:7d:0d:ad:fa:e8:6c:c4:c0:08:16:9f:73: 01:5c:ca:b7:c5:16:71:41:7f:7e:4d:5f:da:66:ca: fb:41:8b:39:53:17:63:4e:7e:d1:bc:9d:c8:8b:0b: 21:d0:8c:65:bf:d5:4f:f2:c5:74:d2:e2:4a:f6:c6: 73:98:8d:90:ea:6f:bd:c5:93:8b:eb:0f:2a:ad:05: e0:d7:ad:3a:5c:83:b1:3e:8f:2e:aa:d4:2e:ba:10: 95:15:c9:25:8a:c4:02:b0:de:97:f7:8d:d5:5f:88: 50:d2:ca:a8:e5:aa:eb:43:9b:fe:19:cb:a3:9f:a1: fc:e5:e1:53:e8:64:20:e0:22:cf:13:72:79:bc:6b: 98:61:74:8d:da:5b:d9:91:41:74:92:f5:74:de:7c: cb:31:ed:85:24:b4:29:81:79:83:4a:1b:ab:9f:88: ce:3a:b4:54:6d:61:50:11:d9:93:77:fc:52:1f:93: d1:76:34:34:9f:45:30:59:d9:2a:20:70:81:81:61: 9d:ec:f1:fb:4b:62:90:37:9b:8e:50:37:d0:26:66: e6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B2:22:34:00:77:2D:8B:79:B2:2F:2C:C2:04:5F:03:0C:74:79:FA X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/853a25de-66ae-4a21-a3a6-bc96c0d2aa83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 162.220.32.0/22 Signature Algorithm: sha256WithRSAEncryption 7b:6f:41:8d:04:a8:dc:39:d1:db:dd:75:aa:98:cf:a0:ca:d0: b8:9b:92:a9:11:a1:34:a3:c7:fd:ae:91:4b:db:c0:36:9b:40: 3e:5b:54:05:df:43:f3:5a:2e:7f:ec:01:7e:ef:41:e0:17:62: e2:74:e5:4b:3b:47:9a:13:1c:cc:ed:4c:1d:52:6d:10:74:f5: 6e:f6:c7:c6:4d:86:a2:a0:d9:e1:b6:1f:02:5f:3a:6d:f8:0c: 92:89:ab:bf:bf:d1:9f:f9:78:50:f7:48:05:9a:15:88:f9:d9: b5:e8:24:ae:6f:0b:8b:86:cb:e2:eb:81:12:ad:84:b4:59:91: 1e:31:f4:ce:68:c7:dc:98:b6:cb:92:0e:67:11:ea:f9:39:63: a7:55:f4:a4:2e:f8:73:61:67:62:76:ea:87:3f:2c:9a:77:20: a2:1d:e6:71:c2:d7:84:a2:94:85:1b:55:93:45:54:c4:9c:02: 50:b8:c5:5a:dd:e1:47:9d:41:dd:13:47:32:36:74:53:18:ce: 41:92:43:2a:f1:15:87:d0:24:06:3b:b6:ee:93:e8:16:6f:f8: 76:6a:93:9f:f1:05:f7:d9:54:00:72:c8:c3:bc:36:ee:d0:02: 3d:ea:45:24:a8:d1:73:99:f4:8b:e7:bb:5b:5a:23:f2:ab:38: 3c:4f:76:b1 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUGRVqnewamnbBpimWYk5IF/++24wwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNDE2MDAwMDExWhcNMjYwNzE1MjM1OTU5 WjB6MUkwRwYDVQQFE0A2YmJiMmNlNWI1YjA1MTQ2YzYxYTA0ZDczYjk3MTY5YTE0 NDRmOGQyNTQ0YWQzOTgwYWE5MDNkYmZiMDZmMmYyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQcsnL9gDmOGpwt+YwUt1t54zOL00MkUfXcoocgHPIvPAB GKGuwq9ehMzdm8dYLn0NrfrobMTACBafcwFcyrfFFnFBf35NX9pmyvtBizlTF2NO ftG8nciLCyHQjGW/1U/yxXTS4kr2xnOYjZDqb73Fk4vrDyqtBeDXrTpcg7E+jy6q 1C66EJUVySWKxAKw3pf3jdVfiFDSyqjlqutDm/4Zy6Ofofzl4VPoZCDgIs8Tcnm8 a5hhdI3aW9mRQXSS9XTefMsx7YUktCmBeYNKG6ufiM46tFRtYVAR2ZN3/FIfk9F2 NDSfRTBZ2SogcIGBYZ3s8ftLYpA3m45QN9AmZub9AgMBAAGjggKxMIICrTAdBgNV HQ4EFgQU4bIiNAB3LYt5si8swgRfAwx0efowHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzg1M2EyNWRlLTY2YWUtNGEyMS1hM2E2LWJjOTZjMGQyYWE4My5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAKi3CAwDQYJKoZIhvcNAQELBQADggEBAHtvQY0EqNw50dvddaqYz6DK0Lib kqkRoTSjx/2ukUvbwDabQD5bVAXfQ/NaLn/sAX7vQeAXYuJ05Us7R5oTHMztTB1S bRB09W72x8ZNhqKg2eG2HwJfOm34DJKJq7+/0Z/5eFD3SAWaFYj52bXoJK5vC4uG y+LrgRKthLRZkR4x9M5ox9yYtsuSDmcR6vk5Y6dV9KQu+HNhZ2J26oc/LJp3IKId 5nHC14SilIUbVZNFVMScAlC4xVrd4UedQd0TRzI2dFMYzkGSQyrxFYfQJAY7tu6T 6BZv+HZqk5/xBffZVAByyMO8Nu7QAj3qRSSo0XOZ9Ivnu1taI/KrODxPdrE= -----END CERTIFICATE-----Generated at Sun Apr 19 10:11:37 2026 by rpki-client